Garageband
CVE-2021-30654
MEDIUM
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.
AnalysisAI
This issue was addressed by removing additional entitlements. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information. Affected products include: Apple Garageband.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Garageband
View allAn issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 7.8), this vulnerability
An out-of-bounds read was addressed with improved bounds checking. Rated high severity (CVSS 7.8), this vulnerability is
A memory initialization issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerab
The issue was addressed with improved bounds checks. Rated high severity (CVSS 7.8), this vulnerability is no authentica
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today